{
  "id": "CVE-2026-94127",
  "vendor_project": "F5",
  "product": "BIG-IP APM",
  "description": "F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution.",
  "kev_date_added": "2026-09-22",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}